Look up supported algorithms and policy templates
Find out which algorithms your tenant may use for keys, with their category, security level, operations and standards, and which predefined policy templates exist.
Who can do it
Every built-in tenant role can read both catalogues, and so can a platform administrator working inside the tenant on a customer-operated deployment. In the console, the algorithm list is on Catalogs, shown to everyone who can list roles; the policy templates are shown only when a person holding the permission to change a tenant policy chooses a new template on Policies. Everyone else reads the templates through the API.
Before you start
- The algorithm list is already filtered by your tenant's effective algorithm policy: your own template if you applied one, the deployment's policy otherwise. A policy that denies every algorithm yields an empty list.
Steps
- Open Catalogs from your tenant's navigation and select the Algorithms tab.
- Choose a view:
- Dashboard: counts and charts over the algorithms on screen, by category, operation, security level, family and standard.
- Explorer: one card per algorithm.
- Catalog: algorithms grouped by family, with filters by category, status, security level, operation and standard.
- Select an algorithm in Explorer or Catalog to open its detail; in a composite's detail, select a component to open that component.
- To see the list exactly as the server filtered it, select View all supported; select Apply policy filter to return to the default view.
- To browse policy templates, open Policies, select Change template on a policy card, read the templates offered for that policy type, and select Cancel to leave without applying one.
What you see when it worked
The banner above the algorithms names the template your tenant's algorithm policy uses and how many algorithms are operational in the tenant. The template browser lists each predefined template for the policy type, with its description.
If it fails
| What you see | Cause | What to do |
|---|---|---|
| Failed to load algorithm catalog. | You lack the permission to read your tenant's algorithms, or the read failed | Select Retry; if it persists, ask a tenant administrator for the permission |
| An empty algorithm list | Your tenant's effective algorithm policy admits no algorithm | Ask an administrator to review the algorithm policy |
| Could not load templates | The template read failed | Select Retry |
| No Change template button on a policy card | You lack the permission to change that policy | Read the templates through the API |
Without the console
| Surface | How |
|---|---|
| Key management CLI | ankasecure-km keys supported-algorithms, filtered with --category, --status, --min-security-level, --max-security-level, --key-ops, --standards, --kty, --alg or --composite-mode |
| Admin SDK | KeyOperations.supportedAlgorithms(SupportedAlgorithmQuery) |
| API: algorithms | GET /api/v3/admin/tenants/{tenantId}/supported-algorithms (operation listSupportedAlgorithms), with the same filters as query parameters |
| API: templates | GET /api/v3/admin/platform/policies/templates, optionally ?type=ALGORITHM_AVAILABILITY or ?type=ALGORITHM_ROTATION (operation getAllTemplates) |